[c-nsp] Effortless CCIE SP

2010-08-01 Thread ccie now

We are dedicated to helping you pass your exam on your first attempt

Pass the CCIE SP Lab exam now easily and effortlessly in one month or less
If you are interested just contact us 
ccie_...@hotmail.com
  
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] %ERROR: Standby doesn't support this command

2010-08-01 Thread Arie Vayner (avayner)
This seems to be CSCsx87562.

Can you please see if you got some tracebacks in the log before this
happened?
Something like:
%SYS-3-TIMERNEG: Cannot start timer (0x) with negative offset (-
YY).

See release notes for more info...

Fix should be in 12.2(54)SG

Arie

-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Lee
Sent: Friday, July 30, 2010 21:30
To: Church, Charles
Cc: nsp-cisco
Subject: Re: [c-nsp] %ERROR: Standby doesn't support this command

On 7/30/10, Church, Charles charles.chu...@harris.com wrote:
 Anyone,

   I'm having issues with some 4510s with dual Sup6-E running
 12.2(53)SG2 doing this on interface range command.  Making our
deployment
 kind of tough:

 SCUAS01(config-if)#interface range GigabitEthernet1/1 - 48
 SCUAS01(config-if-range)# switchport mode access
 %ERROR: Standby doesn't support this command
 % Command failed on interface. Aborting
 SCUAS01(config)#

I don't remember the error message, but I've had that same type of
problem where a 'switchport mode access' fails when applied to a
range.  A
default int range g1/1 - 48
int range g1/1 - 48
 switchport mode access
gets around the problem.  But we have very few switches with dual
supervisors, so it might be a work-around for a different problem...

Regards,
Lee



 In the release notes it claims a similar issue was fixed:

http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/release/note/O
L_51
 84.htmlCSCsa67042   But that's from a while ago.  I'm told by
our
 installer guy that occasionally it is accepted, seems to depend on if
the
 switch was recently rebooted, he claims.  The interface type is
correct.  I
 tried using bug navigator, but it's not giving me any results, not
sure if
 it's working right today, or if I've got a browser issue.  Any help
 appreciated.

 Thanks,

 Chuck


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] %ERROR: Standby doesn't support this command

2010-08-01 Thread Church, Charles
Arie,

Thanks, I did confirm that we were seeing the tracebacks.  Since 
12.2(54) adds VRF-aware TACACS, I think we need to go to that anyway.  Will 
give it a shot.

Chuck

-Original Message-
From: Arie Vayner (avayner) [mailto:avay...@cisco.com] 
Sent: Sunday, August 01, 2010 10:57 AM
To: Lee; Church, Charles
Cc: nsp-cisco
Subject: RE: [c-nsp] %ERROR: Standby doesn't support this command


This seems to be CSCsx87562.

Can you please see if you got some tracebacks in the log before this
happened?
Something like:
%SYS-3-TIMERNEG: Cannot start timer (0x) with negative offset (-
YY).

See release notes for more info...

Fix should be in 12.2(54)SG

Arie

-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Lee
Sent: Friday, July 30, 2010 21:30
To: Church, Charles
Cc: nsp-cisco
Subject: Re: [c-nsp] %ERROR: Standby doesn't support this command

On 7/30/10, Church, Charles charles.chu...@harris.com wrote:
 Anyone,

   I'm having issues with some 4510s with dual Sup6-E running
 12.2(53)SG2 doing this on interface range command.  Making our
deployment
 kind of tough:

 SCUAS01(config-if)#interface range GigabitEthernet1/1 - 48
 SCUAS01(config-if-range)# switchport mode access
 %ERROR: Standby doesn't support this command
 % Command failed on interface. Aborting
 SCUAS01(config)#

I don't remember the error message, but I've had that same type of
problem where a 'switchport mode access' fails when applied to a
range.  A
default int range g1/1 - 48
int range g1/1 - 48
 switchport mode access
gets around the problem.  But we have very few switches with dual
supervisors, so it might be a work-around for a different problem...

Regards,
Lee



 In the release notes it claims a similar issue was fixed:

http://www.cisco.com/en/US/docs/switches/lan/catalyst4500/release/note/O
L_51
 84.htmlCSCsa67042   But that's from a while ago.  I'm told by
our
 installer guy that occasionally it is accepted, seems to depend on if
the
 switch was recently rebooted, he claims.  The interface type is
correct.  I
 tried using bug navigator, but it's not giving me any results, not
sure if
 it's working right today, or if I've got a browser issue.  Any help
 appreciated.

 Thanks,

 Chuck


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] Fax on AS5350

2010-08-01 Thread Tseveendorj Ochirlantuu
Dear Sir/Madam,

I'm trying to configure fax originating from our partner and terminating to
PSTN network through our gateway.

Fax - Partnet gateway - our gateway -- PSTN -- Fax

How to configure fax on AS5350XM gateway ?

Best regards,
Tseveen
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] NAT hairpin on IOS 15

2010-08-01 Thread Brett Looney
Greets,

Running 15.0(1)M2 on a 1941 and have a very simple config:

ip local pool vpnpool 192.168.8.20 192.168.8.150

vpdn-group 1
accept-dialin
  protocol pptp
  virtual-template 1

interface Virtual-Template1
 ip unnumbered GigabitEthernet0/0
 ip nat inside
 peer default ip address pool vpnpool
 ppp authentication ms-chap-v2 ms-chap

interface GigabitEthernet0/0
 ip address 192.168.0.254 255.255.255.0
 ip nat inside

interface GigabitEthernet0/1
 ip address external 255.255.255.252
 ip nat outside

ip nat inside source list NAT interface GigabitEthernet0/1 overload

Users coming in via PPTP can connect find and access local resources but can't 
access the Internet - NAT hairpin appears to be broken. debug ip nat shows 
nothing from those users. Internal (192.168.0.0/24 and other private networks) 
work fine.

Doing a show run virtual-access2.1 shows the ip nat inside command cloned 
across to the interface.

I've changed the config to use the newer NAT NVI stuff (ip nat enable) but the 
result is the same. Before I go off and download 15.0(1)M3 is there anything 
else I should be trying?

BTW - yes, I realise there is no ppp encrypt mppe auto in the 
Virtual-Template1 - this is also broken in 15.0 - it should be available with 
the security feature set but it just doesn't appear as an option to configure - 
the feature navigator says it is there. Waiting for Cisco to resolve this one 
too...

B.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


[c-nsp] CCIE LAB EXAM

2010-08-01 Thread Prakash Kalsaria
Hi, Every One I am going for CCIE SP lab exam
any suggestion or any candidate Please Contact me

Regards,
Prakash Kalsaria
http://prakashkalsaria.wordpress.com
___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] CCIE LAB EXAM

2010-08-01 Thread Ben Steele
nsp isn't an alias for groupstudy, i'm sure it has been said countless times
before but please don't use these lists for study partners/selling gear/how
do I ping? type questions, keep it on topic with valuable questions that
people in this industry actually care about.

Ben

On Mon, Aug 2, 2010 at 1:31 PM, Prakash Kalsaria kalsaria.prak...@gmail.com
 wrote:

 Hi, Every One I am going for CCIE SP lab exam
 any suggestion or any candidate Please Contact me

 Regards,
 Prakash Kalsaria
 http://prakashkalsaria.wordpress.com
 ___
 cisco-nsp mailing list  cisco-nsp@puck.nether.net
 https://puck.nether.net/mailman/listinfo/cisco-nsp
 archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


Re: [c-nsp] NAT hairpin on IOS 15

2010-08-01 Thread Brett Looney
Never mind - dumb user problem on my part. That'll teach me to do stuff on a
Monday morning.

I was looking at the ACL and it was:

permit ip 192.168.0.0 0.0.0.255 any

whereas it should have been:

permit ip 192.168.0.0 0.0.255.255 any

All good now. Thanks for sharing in my embarrassment.

B.



-Original Message-
From: cisco-nsp-boun...@puck.nether.net
[mailto:cisco-nsp-boun...@puck.nether.net] On Behalf Of Brett Looney
Sent: Monday, 2 August 2010 10:24
To: 'cisco_nsp'
Subject: [c-nsp] NAT hairpin on IOS 15

Greets,

Running 15.0(1)M2 on a 1941 and have a very simple config:

ip local pool vpnpool 192.168.8.20 192.168.8.150

vpdn-group 1
accept-dialin
  protocol pptp
  virtual-template 1

interface Virtual-Template1
 ip unnumbered GigabitEthernet0/0
 ip nat inside
 peer default ip address pool vpnpool
 ppp authentication ms-chap-v2 ms-chap

interface GigabitEthernet0/0
 ip address 192.168.0.254 255.255.255.0
 ip nat inside

interface GigabitEthernet0/1
 ip address external 255.255.255.252
 ip nat outside

ip nat inside source list NAT interface GigabitEthernet0/1 overload

Users coming in via PPTP can connect find and access local resources but
can't access the Internet - NAT hairpin appears to be broken. debug ip nat
shows nothing from those users. Internal (192.168.0.0/24 and other private
networks) work fine.

Doing a show run virtual-access2.1 shows the ip nat inside command
cloned across to the interface.

I've changed the config to use the newer NAT NVI stuff (ip nat enable) but
the result is the same. Before I go off and download 15.0(1)M3 is there
anything else I should be trying?

BTW - yes, I realise there is no ppp encrypt mppe auto in the
Virtual-Template1 - this is also broken in 15.0 - it should be available
with the security feature set but it just doesn't appear as an option to
configure - the feature navigator says it is there. Waiting for Cisco to
resolve this one too...

B.


___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/

___
cisco-nsp mailing list  cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/